registry / xspace-browser-mcp-bridge / 5.0.0

xspace-browser-mcp-bridge@5.0.0

MCP bridge that connects AI agents (Cursor, Claude Code, VS Code Copilot, etc.) to the xspace-browser browser extension. Auto-spawns a shared daemon to support multiple simultaneous clients.

AI Security Review

scanned 10h ago · by lpm-firewall-ai

The package is an explicit MCP/CLI bridge that can control a connected browser extension. It starts a local daemon and forwards high-privilege browser operations over local WebSockets; no hidden outbound exfiltration or install-time execution was found.

Static reason

No blocking static signals were detected.

Trigger

User runs a package bin command or configures an AI client to start the MCP bridge.

Impact

An authorized AI client can perform browser actions and access browser-derived data exposed by the attached extension, including cookie/storage and page-evaluation tools.

Mechanism

Token-authenticated local WebSocket relay to a browser extension

Rationale

The package is not malicious by source evidence, but it deliberately supplies a broad browser-control capability to AI agents and includes a fixed-path shell launch fallback. Flag as a warning for dangerous capability rather than blocking publication.

Evidence

package.jsondist/bridge.jsdist/daemon.jsdist/cli.jsdist/chunk-3YG3BFZ3.jsREADME.md~/.xspace-browser/bridge-token~/.xspace-browser-daemon.pid

Network endpoints3

ws://127.0.0.1:9223/extensionws://127.0.0.1:9223/bridgews://127.0.0.1:9223/cli

xspace-browser-mcp-bridge@5.0.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code